Stored Cross-Site Scripting Vulnerability in Beaver Builder Addons by WPZOOM

CVE-2024-2181

Summary

The Beaver Builder Addons for WordPress developed by WPZOOM contains a Stored Cross-Site Scripting vulnerability that allows authenticated attackers with contributor-level access or higher to exploit the Button widget. This flaw is due to inadequate input sanitization and output escaping, enabling malicious scripts to be injected into pages. When a user visits an affected page, these malicious scripts will execute, potentially compromising user data and site integrity.

References